Last updated September 16th, 2026
Bittreo Technologies Ltd. operates under the Vancouver Bitcoin and VBX trade names (collectively, “Bittreo,” “we,” “us” or “our”). This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit our websites, create or use an account, communicate with us, visit a physical location, or use a Vancouver Bitcoin or VBX service.
We handle personal information in accordance with applicable Canadian federal and provincial privacy laws, including the Personal Information Protection and Electronic Documents Act and applicable private-sector privacy legislation in British Columbia and Alberta. Our services are not offered to residents of Quebec.
This Policy does not govern a third-party website, wallet, bank, payment service or other service that you use independently. Those organizations apply their own privacy policies to information under their control.
We collect only the categories of personal information reasonably required for the purposes described in this Policy. The information collected depends on the service, transaction and communication channel you use.
This category may include your name, contact information, residential address, date of birth, account information, government-issued identification and documents used to verify your address or identity.
Identity verification may involve photographs or video of you, selfie images, liveness information and biometric comparison results. Bittreo receives this information and related verification results from its identity-verification provider. Biometric information is used for identity verification, fraud prevention and compliance purposes.
This category may include banking and payment information, payment contact details, transaction instructions and records, source-of-funds or source-of-wealth information, wallet addresses, blockchain transaction information, funding and payout details, and information required to process a payment to a designated biller or payee.
This category may include identity-verification outcomes, sanctions and compliance-screening results, blockchain and wallet risk information, transaction purpose and intended use information, occupation or business information, and information about the ownership, control and authorized representatives of a business customer.
This category may include IP address, browser and device information, operating system, session and security logs, cookie and analytics identifiers, website activity, and information generated when a telephone number or online source is used to track how a customer contacted us.
We may collect emails, support requests, text messages, transaction communications and other correspondence. Customer calls handled through our telephone system are recorded. Physical Vancouver Bitcoin locations use video surveillance without audio recording.
We may collect personal information:
· directly from you when you register, verify your identity, request information, communicate with us, provide transaction instructions, fund or receive a transaction, use Pay Bills, or visit a physical location;
· from an authorized representative of a business customer;
· from service providers that support identity verification, compliance screening, blockchain analysis, payments, banking, trading, settlement, communications and account operation;
· from financial institutions, payment systems, blockchain networks and publicly available or legally accessible sources; and
· automatically through websites, cookies, analytics tools, security logs, call tracking and video surveillance.
Where required, we will provide additional notice or request consent at the point where information is collected.
We may use personal information to:
· create, administer and secure accounts and provide Vancouver Bitcoin and VBX services;
· verify identity, business authority and eligibility for a service or transaction;
· meet anti-money laundering, sanctions, recordkeeping, reporting and other legal or regulatory requirements;
· process, settle, document and reconcile purchases, sales, funding, payouts and Pay Bills transactions;
· review wallet and blockchain activity, prevent fraud, investigate suspicious activity and manage security and operational risk;
· communicate about accounts, transactions, compliance requirements, support requests and service changes;
· respond to customer questions and maintain records of customer instructions and communications;
· record calls for service quality, staff training and possible dispute resolution;
· use video surveillance to protect customers, staff, premises and property, prevent or investigate theft and fraud, and investigate safety or security incidents;
· understand website usage, diagnose technical problems, maintain security and improve website functionality;
· send product announcements, promotions, newsletters or other marketing communications with consent;
· request customer feedback or reviews and administer voluntary review programs;
· establish, exercise or defend legal rights and respond to audits, investigations or legal claims; and
· carry out another purpose that we identify when seeking consent or that is permitted or required by law.
We obtain consent in a form appropriate to the sensitivity of the information and the circumstances. We use express consent where required, including when collecting sensitive identity-verification information. Some collection, use and disclosure is necessary to provide a requested service, verify identity, process transactions, maintain security or comply with law.
Optional marketing, promotional text messages and review invitations are not conditions of using our exchange services. You may withdraw marketing consent at any time through the unsubscribe method provided in the communication or by contacting us.
You may withdraw other consent by giving reasonable notice, subject to legal or contractual restrictions. Withdrawal may prevent us from providing an account, transaction or service, and it does not override legal recordkeeping or reporting obligations. We will explain material consequences of withdrawal where applicable.
Third-party tools may assist with identity verification and compliance screening, but Bittreo makes the final decision to approve or reject a customer.
We may provide personal information to service providers and other organizations where reasonably necessary for the purposes described in this Policy, including:
· identity-verification, compliance, sanctions-screening and blockchain-analysis providers;
· banks, payment systems and financial partners involved in funding, payouts or bill payments;
· trading, liquidity, wallet and settlement providers involved in completing transactions;
· cloud hosting, data storage, cybersecurity and technology providers;
· telecommunications, call-management and messaging providers;
· website analytics providers;
· service providers that distribute voluntary feedback or review requests; and
· legal, accounting, audit, insurance and other professional advisers where their services require the information.
Service providers may process personal information only for the services they provide to Bittreo, subject to applicable contractual and legal requirements. We remain responsible for personal information under our control.
We may disclose personal information where required or permitted by applicable law, including to regulators, law-enforcement agencies, courts, financial institutions and governmental authorities. We may also disclose information where permitted to investigate or prevent fraud or unlawful activity, respond to a legal process, protect legal rights or property, or protect the safety and security of Bittreo, our customers or others.
We do not sell or rent personal information.
Bittreo may send messages under the Vancouver Bitcoin or VBX name. Messages may include customer-requested pricing responses, transaction or account updates, product announcements or promotions, and invitations to provide feedback or reviews. Information about the brands and their services is available at https://vancouverbitcoin.com/ and https://www.vbx.ca/.
We use the mobile telephone number, message content and related communication information you provide to send, receive and respond to mobile messages. We may provide mobile information to telecommunications carriers, messaging platform providers, aggregators and other service providers solely as necessary to operate and deliver the text messaging service.
We do not sell mobile information or share mobile telephone numbers, text-message opt-in information or consent records with third parties or affiliates for their own marketing or promotional purposes. Text-message opt-in information and consent may be provided to aggregators and service providers involved in operating or delivering the messaging service, or disclosed where required or permitted by law.
You may opt out of an SMS program by replying STOP to the sending number. We may send a confirmation and will process the request in accordance with applicable law. Opting out of promotional texts does not prevent service, security, compliance or transaction communications that are otherwise permitted by law.
This section applies specifically to text messaging. The remainder of this Policy continues to apply to personal information handled through other services and communication channels.
Our websites use cookies and similar technologies to maintain sessions and security, understand website traffic and usage, identify technical problems and improve functionality. We use a third-party website analytics service, which may place or read analytics identifiers and process information in the United States.
You can manage cookies through your browser settings and may use available analytics opt-out tools. Blocking cookies may limit some website functions.
Customer calls handled through our telephone system are recorded for service quality, staff training and possible dispute resolution. We also use call-tracking technology to understand how customers reached us. Customers sometimes send text messages to a number used for call tracking; those messages and our responses may be retained as customer communications.
Physical Vancouver Bitcoin locations use video surveillance for customer and staff safety, premises and property security, theft and fraud prevention, and incident investigation. The surveillance system records video without audio. Access to footage is limited to authorized persons and footage is retained only as long as reasonably necessary for these purposes or as required for an investigation or by law.
With consent, we may use contact information to send marketing communications, product announcements and promotions. You may withdraw marketing consent without affecting essential transaction, security or compliance communications.
We may send optional invitations to provide feedback or post a review through a third-party review platform. If you post a review, information you include may be publicly visible and will be governed by that platform’s terms and privacy policy. With your permission where required, we may refer to or display a publicly posted review in our websites or marketing materials.
Some records are stored physically at our offices in Canada. Electronic information may be stored or processed by Bittreo and its service providers in Canada and the United States.
Information processed outside Canada is subject to the laws of the jurisdiction where it is processed and may be accessible to courts, law-enforcement agencies, national-security authorities or regulators in that jurisdiction. We use contractual and other measures intended to require service providers to protect information they process for us.
We retain personal information only as long as reasonably necessary for the purposes for which it was collected and to meet legal, regulatory, tax, accounting, audit, dispute-resolution and security requirements. Applicable anti-money laundering and other laws may require us to keep certain identity and transaction records for several years after a transaction or account relationship ends.
Retention periods vary by the type of information and the reason it is held. When information is no longer required, we securely delete, destroy or anonymize it, subject to technical limitations and lawful backup-retention processes.
We use administrative, technical, physical and contractual safeguards appropriate to the sensitivity of the information. These safeguards include access controls, logging, encryption of electronic information in transit and at rest, locked physical storage, restricted staff access, secure information-handling procedures and contractual requirements for service providers.
Only authorized personnel with a business need may access personal information. No security measure can eliminate every risk, and we cannot guarantee absolute security. Customers are responsible for protecting their account credentials, email accounts, devices, wallets and private keys.
Subject to applicable law, you may request access to personal information under our control, information about how it has been used or disclosed, and correction of inaccurate or incomplete information. You may also ask about consent withdrawal or request deletion where legally available.
Requests must be submitted in writing to the Privacy Officer using the contact information below. We may request information reasonably necessary to verify your identity and authority. Verification information collected for a request will be used for that purpose.
We will respond within the period required by applicable law. Access may be limited where permitted or required by law, including where disclosure would reveal another person’s information, protected confidential information or information that cannot legally be provided. If a permitted fee may apply, we will provide an estimate before processing the request.
You may also submit a privacy complaint to the Privacy Officer. We will review and respond to the complaint. If you are not satisfied, you may contact the privacy regulator with jurisdiction over the matter.
We may update this Policy to reflect changes in our services, information practices or legal obligations. The current version will be posted on the Vancouver Bitcoin and VBX websites with its last-updated date. We will provide additional notice and obtain consent where required for a material new collection, use or disclosure of personal information.
Questions, access or correction requests, consent withdrawals and privacy complaints may be sent to:
Organization
Bittreo Technologies Ltd.
Attention
Privacy Officer
Vancouver Bitcoin
hello@vancouverbitcoin.com
VBX
support@vbx.ca
Mailing address
202-1807 Burrard St., Vancouver, BC V6J 3G9
